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£ — ■ Abstract 

We consider the secure transmission of information over an ergodic fading channel in the 
presence of an eavesdropper. Our eavesdropper can be viewed as the wireless counterpart 
of Wyner's wiretapper. The secrecy capacity of such a system is characterized under the 
assumption of asymptotically long coherence intervals. We first consider the full Channel State 
Information (CSI) case, where the transmitter has access to the channel gains of the legitimate 
receiver and the eavesdropper. The secrecy capacity under this full CSI assumption serves as 
an upper bound for the secrecy capacity when only the CSI of the legitimate receiver is known 
at the transmitter, which is characterized next. In each scenario, the perfect secrecy capacity is 
obtained along with the optimal power and rate allocation strategies. We then propose a low- 
complexity on/off power allocation strategy that achieves near-optimal performance with only 
the main channel CSI. More specifically, this scheme is shown to be asymptotically optimal 
as the average SNR goes to infinity, and interestingly, is shown to attain the secrecy capacity 
under the full CSI assumption. Remarkably, our results reveal the positive impact of fading 
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q , on the secrecy capacity and establish the critical role of rate adaptation, based on the main 

channel CSI, in facilitating secure communications over slow fading channels. 
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1 Introduction 

The notion of information-theoretic secrecy was first introduced by Shannon [1]. This strong notion 
of secrecy does not rely on any assumptions on the computational resources of the eavesdropper. 
More specifically, perfect information-theoretic secrecy requires that I(W; Z) = 0, i.e., the signal 
Z received by the eavesdropper does not provide any additional information about the transmitted 
message W. Shannon considered a scenario where both the legitimate receiver and the eavesdropper 
have direct access to the transmitted signal. Under this model, he proved a negative result implying 
that the achievability of perfect secrecy requires the entropy of the private key K, used to encrypt 
the message W, to be larger than or equal to the entropy of the message itself (i.e., H(K) > H(W) 
for perfect secrecy). However, it was later shown by Wyner in [2] that this negative result was 
a consequence of the over-restrictive model used in [1]. Wyner introduced the wiretap channel 
which accounts for the difference in the two noise processes, as observed by the destination and 
wiretapper. In this model, the wiretapper has no computational limitations and is assumed to 
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know the codebook used by the transmitter. Under the assumption that the wiretapper's signal 
is a degraded version of the destination's signal, Wyner characterized the tradeoff between the 
information rate to the destination and the level of ignorance at the wiretapper (measured by its 
equivocation), and showed that it is possible to achieve a non-zero secrecy capacity. This work 
was later extended to non-degraded channels by Csiszdr and Korner [3], where it was shown that if 
the main channel is less noisy or more capable than the wiretapper channel, then it is possible to 
achieve a non-zero secrecy capacity. 

More recently, the effect of slow fading on the secrecy capacity was studied in [8,9]. In these 
works, it is assumed that the fading is quasi-static which leads to an alternative definition of 
outage probability, wherein secure communications can be guaranteed only for the fraction of time 
when the main channel is stronger than the channel seen by the eavesdropper. This performance 
metric appears to have an operational significance only in delay sensitive applications with full 
Channel State Information (CSI). The absence of CSI sheds doubt on the operational significance 
of outage-based secrecy since it limits the ability of the source to know which parts of the message 
are decoded by the eavesdropper. In this paper, we focus on delay-tolerant applications which 
allow for the adoption of an ergodic version of the slow fading channel, instead of the outage-based 
formulation. Quite interestingly, we show in the sequel that, under this model, one can achieve 
a perfectly secure non-zero rate even when the eavesdropper channel is more capable then the 
legitimate channel on the average. In particular, our work here characterizes the secrecy capacity 
of the slow fading channel in the presence of an eavesdropper [10]. Our eavesdropper is the wireless 
counterpart of Wyner's wiretapper. We first assume that the transmitter knows the CSI of both 
the legitimate and eavesdropper channels, and derive the optimal power allocation strategy that 
achieves the secrecy capacity. Next we consider the case where the transmitter only knows the 
legitimate channel CSI and, again, derive the optimal power allocation strategy. We then propose 
an on/off power transmission scheme, with variable rate allocation, which approaches the optimal 
performance for asymptotically large average SNR. Interestingly, this scheme is also shown to attain 
the secrecy capacity under the full CSI assumption which implies that, at high SNR values, the 
additional knowledge of the eavesdropper CSI does not yield any gains in terms of the secrecy 
capacity for slow fading channels. Finally, our theoretical and numerical results are used to argue 
that rate adaptation plays a more critical role than power control in achieving the secrecy capacity 
of slow fading channels. This observation contrasts the scenario without secrecy constraints, where 
transmission strategies with constant rate are able to achieve capacity [4]. 



The system model is illustrated in Fig. 1. The source S communicates with a destination D in 
the presence of an eavesdropper E. During any coherence interval i, the signal received by the 
destination and the eavesdropper are given by, respectively 



where gM(i), 9E(i) are the channel gains from the source to the legitimate receiver (main chan- 
nel) and the eavesdropper (eavesdropper channel) respectively, and wm(«))%W represent the i.i.d 
additive Gaussian noise with unit variance at the destination and the eavesdropper respectively. 
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Figure 1: The Fading Channel with an Eavesdropper 



We denote the fading power gains of the main and eavesdropper channels by huif) = \gM(i)\ 2 
and h,E(i) = |^(i)| 2 respectively. We assume that both channels experience block fading, where 
the channel gains remain constant during each coherence interval and change independently from 
one coherence interval to the next. The fading process is assumed to be ergodic with a bounded 
continuous distribution. Moreover, the fading coefficients of the destination and the eavesdropper 
in any coherence interval are assumed to be independent of each other. We further assume that the 
number of channel uses n\ within each coherence interval is large enough to allow for invoking ran- 
dom coding arguments. As shown in the sequel, this assumption is instrumental in our achievability 
proofs. 

The source wishes to send a message W <E W = {1,2, ■ ■ ■ , M} to the destination. An (M, n) 
code consists of the following elements: 1) a stochastic encoder f n (.) at the source that maps the 
message 1 w to a codeword x n E X n , and 2) a decoding function 0: y n — > W at the legitimate 
receiver. The average error probability of an (M, n) code at the legitimate receiver is defined as 

p™ = ^ Pr 0(?/ n ) w \ w was sent )- (!) 

The equivocation rate R e at the eavesdropper is defined as the entropy rate of the transmitted 
message conditioned on the available CSI and the channel outputs at the eavesdropper, i.e., 

R e t -H(W\Z n ,h n M ,h n E ) , (2) 

Th 

where h n M = {Hm{1), • • • , ^m(^)} and h E = {/i^(l), • • • , /ie(ti)} denote the channel power gains of 
the legitimate receiver and the eavesdropper in n coherence intervals, respectively. It indicates the 
level of ignorance of the transmitted message W at the eavesdropper. In this paper we consider 
only perfect secrecy which requires the equivocation rate R e to be equal to the message rate. The 
perfect secrecy rate R s is said to be achievable if for any e > 0, there exists a sequence of codes 
(2 nRa ,n) such that for any n > n(e), we have 

p: < e, 

R e = -H(W\Z n ,h n M ,h n E ) > R s -e. 
n 

1 The realizations of the random variables W, X, Y, Z are represented by w, x, y, z respectively in the sequel. 
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The secrecy capacity C s is defined as the maximum achievable perfect secrecy rate, i.e., 

C s = sup R s . (3) 

P"<e 

Throughout the sequel, we assume that the CSI is known at the destination perfectly. Based on 
the available CSI, the transmitter adapts its transmission power and rate to maximize the perfect 
secrecy rate subject to a long-term average power constraint P. 



3 Full CSI at the Transmitter 

Here we assume that at the beginning of each coherence interval, the transmitter knows the channel 
states of the legitimate receiver and the eavesdropper perfectly. When Km and He are both known 
at the transmitter, one would expect the optimal scheme to allow for transmission only when 
Hm > hE, and to adapt the transmitted power according to the instantaneous values of hu and He- 
The following result formalizes this intuitive argument. 

Theorem 1 When the channel gains of both the legitimate receiver and the eavesdropper are known 
at the transmitter, the secrecy capacity is given by 

roo i*oo r _. 

Cf } = max / / log (1 + h M P(h M ,h E ))- log (1 + h E P(h M , h E )) \f(h M )f(h E )dh M dhE, 

P(h M ,hE)J Jh E 1 J 

(4) 

such that E{P{h M ,h E )} < P- (5) 

Proof: A detailed proof of achievability and the converse part is provided in the Appendix. Here, 
we outline the scheme used in the achievability part. In this scheme, transmission occurs only 
when Hm > hE, and uses the power allocation policy P(/im,^b) that satisfies the average power 
constraint (5). Moreover, the codeword rate at each instant is set to be log (1 + HmP^m, hs)), 
which varies according to the instantaneous channel gains. The achievable perfect secrecy rate at 
any instant is then given by [log (1 + huPihu, hE)) — log (1 + hEP{hu, Averaging over all 

fading realizations, we get the average achievable perfect secrecy rate as 



J j [log (1 + h M P{h M , h E )) - log (1 + h E P(h M , h E ))] + f(h M )f(h E )dh M dhE 

log (1 + h M P(h M , h E )) - log (1 + h E P(h M , h E )) f(h M )f(hE)dh M dhE ■ 



OO POO ,_ 



Jh E 



One can then optimize over all feasible power control policies P(hM, hs) to maximize the perfect 
secrecy rate. □ 

We now derive the optimal power allocation policy that achieves the secrecy capacity under 
the full CSI assumption. It is easy to check that the objective function is concave in P{Hm, hs), 
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and hence, by using the Lagrangian maximization approach for solving (4), we get the following 
optimality condition 

dR,j F ^ hM h£ ^ q 

dP(h M ,h E ) l + h M P(h M ,h E ) l + h E P(h M ,h E ) 

whose solution is 



P(h M ,h E ) = 




If for some (h,M, h E ), the value of P(Jim, h E ) obtained from (6) is negative, then it follows from the 
concavity of the objective function w.r.t. P{h M , h E ) that the optimal value of P(Jim, h E ) is 0. Thus 
the optimal power allocation policy at the transmitter is given by 



P(h M ,h E ) = 




where [x} + = max{0,x}, and the parameter A is a constant that satisfies the power constraint 
in (5) with equality. The secrecy capacity is then determined by substituting this optimal power 
allocation policy for P(/im, h E ) in (4). 

4 Only Main Channel CSI at the Transmitter 

In this section, we assume that at the beginning of each coherence interval, the transmitter only 
knows the CSI of the main channel (legitimate receiver). 

4.1 Optimal Power Allocation 

We first characterize the secrecy capacity under this scenario in the following theorem. 

Theorem 2 When only the channel gain of the legitimate receiver is known at the transmitter, the 
secrecy capacity is given by 

Cf M ) = max / / [log (1 + h M P(h M )) - log (1 + h E P(h M ))] + f(h M )f(h E )dh M dh E , (8) 

P ( h M) J J 

such that E{P{h M )} < P. (9) 

Proof: A detailed proof of achievability and the converse part is provided in the Appendix. Here, 
we outline the scheme used to show achievability. We use the following variable rate transmission 
scheme. During a coherence interval with main channel fading state fiM, the transmitter transmits 
codewords at rate log(l + h M P{hM)) with power P(h M )- This variable rate scheme relies on the 
assumption of large coherence intervals and ensures that when h E > hM, the mutual information 
between the source and the eavesdropper is upper bounded by log(l + ^m-P(^jw))- When h E < hM, 
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this mutual information will be log(l + h E P(fiM))- Averaging over all the fading states, the average 
rate of the main channel is given by 

J j log (1 + h M P{h M )) f(h M )f(h E )dh M dh E: 

while the information accumulated at the eavesdropper is 

log (1 + mm{h M , h E }P(h M )) f(h M )f(h E )dh M dh E . 

Hence for a given power control policy P(/im), the achievable perfect secrecy rate is given by 

R[ M) = J J [log (1 + h M P(h M )) - log (1 + h E P(h M ))} + f(h M )f(h E )dh M dh E . (10) 

One can then optimize over all feasible power control policies P{h M ) to maximize the perfect secrecy 
rate. Finally, we observe that our secure message is hidden across different fading states (please 
refer to our proof for more details). □ 

We now derive the optimal power allocation policy that achieves the secrecy capacity under 
the main channel CSI assumption. Similar to Theorem 1, the objective function under this case is 
also concave, and using the Lagrangian maximization approach for solving (8), we get the following 
optimality condition. 



dR ( s M) h M Yi (h E < h M ) f hM ( h 



dP(h M ) l + h M P(h M ) Jo \l + h E P(h M ) 



f(h E )dh E -X = 0, 



where A is a constant that satisfies the power constraint in (9) with equality. For any main channel 
fading state h M , the optimal transmit power level P{Jim) is determined from the above equation. 
If the obtained power level turns out to be negative, then the optimal value of P{Hm) is equal to 0. 
This follows from the concavity of the objective function in (8) w.r.t. P(Hm)- The solution to this 
optimization problem depends on the distributions /(/^m) and f(h E ). In the following, we focus on 
the Rayleigh fading scenario with E{/im} = 1m an d ^{h E } = l E in detail. With Rayleigh fading, 
the objective function in (8) simplifies to 



roc 

C ( S M) = max / (1 -e-( hM ^)\og(l + h M P(h M )) - 



-h 



M 



I log (1 + h E P(h M )) ^ e -( hE ^dh E 
Jo 1e 



_ e ~(hMh M ) dhM 

7m 



max 

P(h M ) 



[ [log (1 + h M P(h M )) - exp ( _ 1 ) (Ei ( _ 1 ) 

Jo I \lEP{.h M )J V. \i E P{h M )J 



Ei('^+ ' 



1e l E P(h M ) 



_ e -(hMh M ) dhM ^ ( U ) 

1m 



where 



oo e -t 



Ei(x) = j — dt . 



X 
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Specializing the optimality conditions to the Rayleigh fading scenario, it can be shown that the 
power level of the transmitter at any fading state hu is obtained by solving the equation 



(i 



h 



M 



1 + h M P(h M 
1 



A 



(\ _ e -( h M/l E )^ 



+ 



cxp 



■y E P(h M ) 



i E {p(h M )r 



Ei 



Mi 



-Ei 



M 



+ 



1e lE P (h M ) 



0. 



If there is no positive solution to this equation for a particular fiM, then we set P{Iim) = 0. The 
secrecy capacity is then determined by substituting this optimal power allocation policy for P{Jim) 
in (11). 

We observe that, unlike the traditional ergodic fading scenario, achieving the optimal perfor- 
mance under a security constraint relies heavily on using a variable rate transmission strategy. This 
can be seen by evaluating the performance of a constant rate strategy where a single codeword is 
interleaved across infinitely many fading realizations. This interleaving will result in the eavesdrop- 
per gaining more information, than the destination, when its channel is better than the main 
channel, thereby yielding a perfect secrecy rate that is strictly smaller than that in (10). It is easy 
to see that the achievable perfect secrecy rate of the constant rate scheme, assuming a Gaussian 
codebook, is given by 

max / / [log (1 + h M P(h M )) - log (1 + h E P(h M ))} f(h M )f(h E )dh M dh E , 

P{h M ) J J 



such that 



E{P(M> < P- 



Unlike the two previous optimization problems, the objective function in this optimization prob- 
lem is not a concave function of P(/im)- Using the Lagrangian formulation, we only get the following 
necessary KKT conditions for the optimal point. 



P(h 



M) 



A - 

A > 



h 



M 



+ 



l + h M P(h M ) J \l + h E P(h M ) 
hu f i h E 



-/(r 



l + h M P(h M ) J \l + h E P(h M ) 
E{P(h M )} = P. 



f(h E )dh E 
f{h E )dh E , 



0, 



(12) 



4.2 On/Off Power Control 

We now propose a transmission policy wherein the transmitter sends information only when the 
channel gain of the legitimate receiver hu exceeds a pre-determined constant threshold r > 0. 
Moreover, when Hm > t, the transmitter always uses the same power level P. However, it is crucial 
to adapt the rate of transmission instantaneously as log(l + PHm) with Hm- It is clear that for an 
average power constraint P, the constant power level used for transmission will be 



Pr(h M > r) ' 
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Using a similar argument as in the achievable part of Theorem 2, we get the perfect secrecy rate 
achieved by the proposed scheme, using Gaussian inputs, as 



■*oo poo 



[log (1 + h M P) - log (1 + h E P)} + f(h M )f(h E )dh M dh E . 



'0 Jt 

Specializing to the Rayleigh fading scenario, we get 

P 



Pr(h M > r) 



p e (. T h M ) 



and the secrecy capacity simplifies to 

"OO 1-h.M 



>T JO 

which then simplifies to 



[log (1 + h M Pe {Th ^) - log (1 + h E Pe {ThM) )] ^e- {hMh « ] ^e- {hEhE) dh E dh M , 

7m 1e 



R (CP) = e -(r/ 7M ) 1q A + T p e {rh M )\ + ex p ( -\ - - ) Ei ( — + - 1 . - . ) 



+ exp 



T 



Ei(^ + 



\1e 7 E Pe<?h*) 



— exp 



7m 7b 



P e (j/lM) 



Ei 



1 1 

7m 7b 



T + 



Ei 
1 



Pei-r/iM) 



One can then optimize over the threshold r to get the maximum achievable perfect secrecy rate. 

Finally, we establish the asymptotic optimality of this on/off scheme as the available average 
transmission power P — > oo. For the on/off power allocation policy, we have 



R? p ) = hm 

P^oo 



oo fh,M 



t* JO 



log 



1 + h M P 
l + h E P 



f(h M )f{h E )dh E dh M - 



Taking r* = 0, we get P = P and 

-oo rhn 

Rf p ) > hm 

P^oo 
f-oo ph 



JO 



log 



( {VP) 



f(h M )f{h E )dh E dh M 



(a) 







V (1/P) + h E 
f M - lim lo § f n/^tt^ f(hM)f(h E )dhEdh 

JO p ^°° \\ l /P)+ h Ej 



poo rh M 

= / / log 



h R 



f(h M )f(h E )dh E dh M = E {hM>hls} < log 



tlM 

h E 



(13) 



where (a) follows from the Dominated Convergence Theorem, since 



log 



h 



( {VP) 
\ {VP) + h E 



< 



log 



Km 

h E 



VP when Km > h E , 
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and 



log ( 'j^- ) f{h M )f{h E )dh E dh M < oo, 



since E{/im} < oo, logx dx = 1 < oo and /(/im), f(h E ) are continuous and bounded. 



Now under the full CSI assumption, we have 

+ h M 



i 



Cf ) = E {hM>hE} log 



P{h M ,h E ) 



P(h M ,h E ) 



+ h 




< E 



{h M >h E } 



, hM 



(14) 



From (13) and (14), it is clear that the proposed on/off power allocation policy that uses only the 
main channel CSI achieves the secrecy capacity under the full CSI assumption as P — > oo. Thus 
the absence of eavesdropper CSI at the transmitter does not reduce the secrecy capacity at high 
SNR values. 



5 Numerical Results 



As an additional benchmark, we first obtain the performance when the transmitter does not have 
any knowledge of both the main and eavesdropper channels (only receiver CSI). In this scenario, 
the transmitter is unable to exploit rate/power adaptation and always transmits with power P. It 
is straightforward to see that the achievable perfect secrecy rate in this scenario (using Gaussian 
inputs) is given by 



oo poo 



1 + 



[log (1 + h M P) - log (1 + h E P)] f(h M )f(h E )dh M dh E 

POO poo 

/ log (1 + h M P) f(h M )dh M - / log (l + h E P) f(h E )dh E 
Jo Jo 



JO 

oo 



which reduces to the following for the Rayleigh fading scenario 



' ( 1 

exp — 



Ei(V 



\lM P J \lM P 



- exp - 



1 E P 



Ei 



1 E P 



Thus when 7 y E > 7 M , R} s ' — 0. The results for the Rayleigh normalized-symmetric case (j M = 
7 S = 1) are presented in Fig. 2. It is clear that the performance of the on/off power control scheme 
is very close to the secrecy capacity (with only main channel CSI) for a wide range of SNRs and, 
as expected, approaches the secrecy capacities, under both the full CSI and main channel CSI 
assumptions, at high values of SNR. The performance of the constant rate scheme is much worse 
than the other schemes that employ rate adaptation. Here we note that the performance curve for 
the constant rate scheme might be a lower bound to the secrecy capacity (since the KKT conditions 
are necessary but not sufficient for non-convex optimization). We then consider an asymmetric 
scenario, wherein the eavesdropper channel is more capable than the main channel, with 7 M = 1 
and ^ E = 2. The performance results for this scenario are plotted in Fig. 3. Again it is clear from 
the plot that the performance of the on/off power control scheme is optimal at high values of SNR, 
and that rate adaptation schemes yield higher perfect secrecy rates than constant rate transmission 
schemes. 
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Figure 2: Performance comparison for the symmetric scenario j M = r y E = 1. 
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Figure 3: Performance comparison for the asymmetric scenario j M = 1 and / -f E = 2. 
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6 Conclusions 



We have characterized the secrecy capacity of the slow fading channel with an eavesdropper under 
different assumptions on the available transmitter CSI. Our work establishes the interesting result 
that a non-zero perfectly secure rate is achievable in the fading channel even when the eavesdropper 
is more capable than the legitimate receiver (on the average). By contrasting this conclusion 
with the traditional AWGN scenario, one can see the positive impact of fading on enhancing the 
secrecy capacity. Furthermore, we proposed a low-complexity on/off power transmission scheme and 
established its asymptotic optimality. This optimality shows that the presence of eavesdropper CSI 
at the transmitter does not offer additional gains in the secrecy capacity for slow fading channels, 
at high enough SNR levels. The knowledge of the main channel CSI, however, is crucial since 
it is easy to see that the absence of this information leads to a zero secrecy capacity when the 
eavesdropper is more capable than the legitimate receiver on the average. Finally, our theoretical 
and numerical results established the critical role of appropriate rate adaptation in facilitating 
secure communications over slow fading channels. 



A Proof of Theorem 1 

We first prove the achievability of (4) by showing that for any perfect secrecy rate R s < cT\ there 
exists a sequence of (2 nRa ,n) block codes with average power P, equivocation rate R e > R s — e, 
and probability of error P e n — > as n — > oo. Let R s = C s — 35 for some 8 > 0. We quantize 
the main channel gains Hm G [0, Mi] into uniform bins {^m,i}|Li, anc ^ ^ ne eavesdropper channel 
gains h E G [0, M 2 ] into uniform bins {hE,j}f=v The channels are said to be in state (i G [l,?i], 
3 G [!» 92]), if h M ,i <h M < h Mj{i+1) and h E:j < h E < h Ej{j+1) , where h M ^ qi+1) = M u h Ej{(}2+1) = M 2 . 
We also define a power control policy for any state s^- by 

P(h M ,i,h Ejj ) = inf P(h M ,h E ) , (15) 

h-M,i<h M <h M ( i+1 - ) ,h E j<h E <h E ^ +1 - j 

where P(fiM,h E ) is the optimal power allocation policy in (7) that satisfies P(fiM,h E ) = for all 
hu < h E , and the power constraint 

/»oo /»oo 

/ / P(h M ,h E )f(h M )f(h E )dh M dh E < P. (16) 

JO Jh E 

Consider a time-invariant AWGN channel with channel gains hu £ [h>M,i, ^m,(j+i)) an d h E G 
[h-Ej, h E ^ j+ i)). It is shown in [5,6] that for this channel, we can develop a sequence of (2 ni ^ Ra ^ , n^) 
codes with codeword rate log (1 + h M ^P{h M ^ h E j)) and perfect secrecy rate 

(R s )ij = log (l + h M ,iP(hM,i,h E j)) -hg{l + h E ,{j+i)P(h M ,i, h E ,j)) , (17) 
such that the average power is P(hM,i, h E j) and with error probability P % J> — > as — > oo, where 

Uij = nPr (h M ,i < h M < h M ,(i+i), h E:j < h E < h E ,(j+i)) 

for sufficiently large n. Note that the expression in (17) is obtained by considering the worst case 
scenario hu = h,M,i, h E = He^+i) that yields the smallest perfect secrecy rate. 
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For transmitting the message index w e {1, • • • , 2 nRs }, we first map w to the indices by 
dividing the nR s bits which determine the message index into sets of riij(R s )ij bits. The transmitter 
uses a multiplexing strategy and transmits codewords {x Wij } at codeword rate log (1 + h,M,iP(h,M,i, h-Ej)) 
and perfect secrecy rate (R s )ij, when the channel is in stcttc Sij . As n — > oo, this scheme achieves 
the perfect secrecy rate (using the ergodicity of the channel), 



R 



91 92 

EE 

i=i j=i 



log 



1 + h M ,iP(h M ,i, h EJ ) 



1 + hE,(j+i)P(hM,i, hE,j) 

Thus for a fixed 5, we can find a sufficiently large n such that 

1 + h Mtl P(h M „ h E ,j) 



Pr < h M < h M ,(i+i), hEj <h E < h E: (j+i)) ■ 
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«■ a EE 

i=i j=i 



log 



1 + h,E,(j+i)P(hM,i, h-E,j) 



Pr (/lM,i < ^M < h M ,(i+l), flE,j < h-E < h E ,(j+l))—S. 

(18) 



For asymptotically large n, using the ergodicity of the channel, the average power of the multiplexing 
scheme satisfies 

Jl^ r h M,( i+ i) r h E,u+i) 

2_^2_^P(h M ,i,h E ,j) / / f(h M )f(hE)dh M dh E 

i=l i=l Jh,M,i JhE,j 



(a) 
< 



3 

OO POO 



JO 



(6) _ 

P(h M ,hE)f(h M )f(hE)dh M dhE < P, 



where (a) follows from the definition of P(fiM,i,hE,j) in (15) and (b) follows from (16). Moreover, 
the error probability of the multiplexing scheme is upper bounded by 
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P e ^ EE P ^' - 0, asn-oo. 

i=l j=l 



Now since 

C (F) = 



oo poo 



JO 



[log (1 + h M P(h M , h E )) - log (1 + h E P{h M , h E ))} + f(h M )f(h E )dh M dh E 

POO POO / \ 

< J J log yj^J f(hM)f(h E )dh M dh E < oo, 

(because E{/im} < oo, jj^logx dx = 1 < oo and /(/im),/(^b) are continuous and bounded), 
there exist M 1 and M 2 for a fixed S such that 



Mi ^oo r 

/ [log(l + /i M P(/ iM ,M)-log(l + ^(^M,M)] + /(M/(Md/iMd^ < 
o -/m 2 

oo /-M2 



3 ' 



/ / [log (1 + h M P(h M , h E )) - log (1 + h E P(h M , h E ))] + f(h M )f(h E )dh M dh E < - , (19) 

J Mi JO 



oo />oo 



[log (1 + h M P(h M , h E )) - log (1 + h E P(h M , h E ))} + f(h M )f(h E )dh M dh E < 



Mi J M 2 
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Moreover, for fixed M 1 and M 2 , the dominated convergence theorem implies that 

1 + hM,iP(tlM,i, hE,j) 
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lim 2, /. 

t=i 3=1 



log 



1 + hE,(j+l)P(hM,i, h E) 



Pr (h M ,i <h M < h M ,(i+i), h E j <h E < h E ,(j+i)) 
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= lim V V 

(91,92)^00 tt ' 
i=i j=i 



M,(»+l) 



£,U+i) 



log 



/•Mi 
JO 



rM 2 


log ( 


Jo 





1 + h M P(h M , h E ) 
1 + h E P(h M , h E ) 



1 + h M ,iP(h M ,i, h E>j ) 
1 + h E ,(j+i)P(hM,i, h E j) 

f(h M )f(h E )dh M dh E . 



f{h M )f(h E )dh M dh E 



Choosing Mi,M 2 that satisfy (19) and combining (19) and (20), we see that for a given 5, there 
exist sufficiently large (71,(72 such that 



91 92 

EE 

i=i j=i 



log 



> 



1 + hM,iP(hM,i, h E ,j) 

1 + h E ,(j+i)P(h M ,h h E ,j 

' / 1 + h M P(h M , h E ) 
log 



Pr (^M,i < < h M ,(i+i), h E j <h E < hE,(j+i)) 

f(h M )f(h E )dh M dh E - 25. (21) 



Jo Jo L V 1 + h E P(h M , h E ) 
Combining (18) and (21), we get the desired result. 

We now prove the converse part by showing that for any perfect secrecy rate R s with equivocation 
rate R e > R s — e and error probability P e n — > as n — > 00, there exists a power allocation policy 
P(fiM, h E ) satisfying the average power constraint, such that 

R s < J J [log(l + h M P(h M , h E )) - log(l + ^P(/i M , ^))] + f(h M )f(h E )dh M dh E . 

Consider any sequence of (2 nRs ,n) codes with perfect secrecy rate R s and equivocation rate R e , 
such that R e > R s — e, with average power less than or equal to P and error probability P™ — > 
as n — > 00. Let N{Hm, h E ) denote the number of times the channel is in fading state (Iim, h E ) over 



the interval [0,n\. Also let P n (h M , h E ) = E{ Y^ =1 



-{hM(i)=hM,hE(i)=hE} 



}, where are the 



codewords corresponding to the message w and the expectation is taken over all codewords. We 
note that the equivocation H(W\Z n , /i M , h E ) only depends on the marginal distribution of Z n , and 
thus does not depend on whether Z{%) is a physically or stochastically degraded version of Y(i) or 
vice versa. Hence we assume in the following derivation that for any fading state, either Z(i) is a 
physically degraded version of Y(i) or vice versa (since the noise processes are Gaussian), depending 
on the instantaneous channel state. Thus we have 

nR e = H(W\Z n ,h n M ,h n E ) 

< H(W\Z n , h n M , h E ) - H(W\Z n , Y n , h n M , h n E ) + n5 n 
= I(W;Y n \Z n ,h n M ,h n E )+n5 n 

< I(X n ;Y n \Z n ,h n M ,h n E )+nS n 

= H(Y n \Z n , h n M) h n E ) - H(Y n \X n , Z n , h n M , h n E ) + n5 n 

n 

= [H(Y(t)\Y*-\ Z\ h n M , h E ) - HtyWY*- 1 , X n , Z\ h n M , h n E )} + n5 n 
i=i 



(20) 
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(c) 



< M y ii)\Z{i), h M (i), h E (i)) - H(Y(i)\X(i), Z(i), h M (i), h E (i))\ + n5 n 
i=i 

1(X(fy Y(i)\Z(i), h M (i), h E (i)) + n5 n 

i=i 

Z~2 1 1 I ( X 'i Y \ Z -> h M,h E )l{h M (i)=h M ,h E (i)=h E }dh M dh E + n5 n (22) 
J J I(X; Y\Z, h M , h E )N(h M , h E )dh M dh E + n5 n 

J j N(h M , h E ) [log(l + h M P n (h M , h E )) - log(l + h E P n (h M , h E ))} + dh M dh E + n5 n . 



(d) 
< 



In the above derivation, (a) follows from the Fano inequality, (b) follows from the data processing 
inequality since W — * X n — > (Y n , Z n ) forms a Markov chain, (c) follows from the fact that con- 
ditioning reduces entropy and from the memoryless property of the channel, (d) follows from the 
fact that given Hm and h E , the fading channel reduces to an AWGN channel with channel gains 
(hM, h E ) and average transmission power P n (tiM, h E ), for which 

I(X;Y\Z,h M ,h E ) < [log(l + h M P n {h M , h E )) - log(l + h E P n (h M , h E ))} + , 

as shown in [5,6]. Since the codewords satisfy the power constraint, we have 



// 



P n (h M ,h E )\ N(hM > hEy )dh.udh t < P. 



n 



For any fiM,h E such that f(fiM,h E ) ^ 0, {P n (tiM, h E )} are bounded sequences in n. Thus there 
exists a subsequence that converges to a limit P(1im, h E ) as n — > oo. Since for each n, the power 
constraint is satisfied, we have 



J J P(h M ,h E )f(h M )f(h E )dh M dh E < P. 



(23) 



Now, we have 



Re < 



N(h M ,h E ) 



n 



log 



l + h M P n (h M ,h E ) 



dh M dh E + 5 n . 



l + h E P n (h M ,h E ) 

Taking the limit along the convergent subsequence and using the ergodicity of the channel, we get 

1 + h M P(h M , h E y 



R P < 



The claim is thus proved. 



log 



1 + h E P(h M , h E ) 



f(h M )f(h E )dh M dh E + 5 n . 



B Proof of Theorem 2 

Let R s = C ( s M) - 5 for some small 5 > 0. Let n = riim, where ri\ represents the number of 
symbols transmitted in each coherence interval, and m represents the number of coherence intervals 
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over which the message W is transmitted. Let R = E{log(l + h M P{h M ))} — £■ We first generate 
all binary sequences {V} of length nR and then independently assign each of them randomly to 
one of 2 nRs groups, according to a uniform distribution. This ensures that any of the sequences 
are equally likely to be within any of the groups. Each secret message w G {1, • • • 7 2 nRs } is then 
assigned a group V(tu). To encode a particular message w, the stochastic encoder randomly selects a 
sequence v from the corresponding group V(u>), according to a uniform distribution. This sequence 
v consisting of nR bits is then sub-divided into independent blocks {v(l), • • • , v(m)}, where the 
block v(i) consists of n x [log(l + h M {i)P{h M {i))) — e] bits, and is transmitted in the i th coherence 
interval (i e {1, • • • , m}). As m — > oo, using the ergodicity of the channel, we have 

m 

lim Vrn[log(l + /iM(i)i 3 (M»)))-e] = n im [E{\og(l + hMP(h M ))} -e] = nR. 

i=l 

We then generate i.i.d. Gaussian codebooks {X ni (i) : i — 1, • • • , m} consisting of 2 ni ^ og ^ 1+hM ^ p( - hM M))~ e ] 
codewords, each of length n\ symbols. In the i th coherence interval, the transmitter encodes the 
block v(i) into the codeword x ni (i), which is then transmitted over the fading channel. The legit- 
imate receiver receives y ni (i) while the eavesdropper receives z ni (i) in the i th coherence interval. 
The equivocation rate at the eavesdropper can then be lower bounded as follows. 



nR e = H(W\Z ni (l) 

= H{W,Z ni (l) 

= H(W,Z ni (l) 

= H(X ni (l),-- 

> H(X ni (l),-- 
-H(Z^(1), 

= H(X^(1),-- 

= H{X n \l),-. 



Z^(m),h n M ,h n E ) 



Z^(m)\h n M} h n E ) - H(Z^(1), • • • , Z^(m)\h n M , h n E ) 
Z^(m),X^(l), ■ ■ ■ ,X^(m)\h n M , h n E ) - H(Z*"(1), • • • , Z^(m)\h n M , h n E ) 
-H(X ni (l), - ■ ■ ,X ni (m)\W,Z ni (l),- ■ ■ , Z ni (m) , h r M , hi) 



X^(m)\h n M ,hl) + H(W,Z^(l) 
,Z^(m)\h n M ,hl)-H(X^(l), 
X^(m)\h n M ,hl) + H(Z^(l),.. 
,Z^(m)\h n M ,hl)-H(X^(l),^ 
X^(m)\h n M ,hl)-I(Z^(l),... 



■■■ ,Z^(m)\X^(l),... ,X^(m),h n M ,hl) 
■, X" 1 (m) | W, Z n ^ ( 1 ),-.., Z" 1 (m) ,h n M , h E ) 
,Z^(m)\X^(l),-.. ,X^(m),h n M ,hl) 
■ , X^(m)\W, Z n >(l), ■ ■ ■ , Z^(m),h n M , h E ) 



,Z^(m);X^(l),... ,X^(m)\h n M ,hl) 
-H(X^(1), ■ ■ ■ ,X^(m)\W, Z n >(l), Z^(m), h n M , h n E ) 
,X^(m)\Z^(l),... ,Z^(m),h n M ,hl) 

-H(X^(1), ... ,X^(m)\W,Z^(l),... , Z**(m), h n M ,h n E ) 



(a) 



(b) 
> 



Y,H(X^(z)\Z^(t), h M (i), h E (i)) - H(X^(1), ■ ■ ■ ,X^(m)\W, Z n \\\ • 

i=l 

H(X^{i)\Z^(i), h M (i), h E (i)) - H(X^(1), ■ ■ ■ ,X^(m)\W, Z**(l), 



Z^(m),h n M ,hl) 
,Z^(m),h n M ,hl) 



> 



[H(X^(i)\h M (i),h E (i)) -I(X ni (i);Z ni (i)\h M (i),h E (i))] 

-H(X ni (l),-.. ,X ni (m)\W,Z ni (l), 
ni [log (1 + h M (i)P(h M (i))) - log (1 + h E {i)P{h M {i))) - e] 



-H(X ni (l),.-. ,X ni (m)\W,Z ni (l) 



Z^(m),h n M ,hl) 



Z^(m),h n M ,hl) 



15 



> J>{ [log (1 + h M (t)P(h M (t))) - log (1 + h E (l)P{h M (l)))} + - t) 

-H{X n \l), ■ ■ ■ ,X^(m)\W, Z^(l), Z^(m), h n M , h E ) 
( i - H(X^(1), • • • , X^(m)\W, Z^(l),.-., Z^(m), h n M , h n E ) - ne. (24) 

In the above derivation, (a) follows from the memoryless property of the channel and the indepen- 
dence of the X ni (i)'s, (b) is obtained by removing all those terms which correspond to the coherence 
intervals i Af m , where Af m = {i G {1, • • • , m} : h M {i) > h E (i)}, and (c) follows from the ergodicity 
of the channel as m — > oo. 

Now we show that the term H(X ni (l), ■ ■ ■ ,X ni (m)\W, Z ril (l), • • • , Z ni (m), h n M , h n E ) vanishes as 
m, n\ — > oo by using a list decoding argument. In this list decoding, at coherence interval i, the 
eavesdropper first constructs a list Ci such that x ni (i) G Ci if (x ni (i), z ni (i)) are jointly typical. 
Let C = C 1 x C 2 x • • • x C m . Given w, the eavesdropper declares that x n = (x ni (l), ■ ■ ■ ,x ni (m)) 
was transmitted, if x n is the only codeword such that x n G B(w) fl C, where B{w) is the set of 
codewords corresponding to the message w. If the eavesdropper finds none or more than one such 
sequence, then it declares an error. Hence, there are two type of error events: 1) S\. the transmitted 
codeword x™ is not in C, 2) E-2- 3x n 7^ x™ such that x n G B(w) fl C. Thus the error probability 
Pr(x n ^ x/) = Pr(S 1 U £2) < Pr(^i) + Pr(£ 2 ). Based on the AEP, we know that Pr(£i) < e x . In 
order to bound Pr(£ 2 ), we first bound the size of Ci. We let 

d)-(x ni (i)\z ni (i)) = I 1 ' when ( a;ril ( i )^ ril (0) are jointly typical, ( . 

VA Ul K \ 0, otherwise. 1 ; 

Now 



E{||A||} = E<j 

< E<jl + Yl 

< 1+ E {<M^ ni 

< 1 _)_ 2™l[ 1 °S( 1 + ?i M(i)^(^M(j)))-log(l+/lE(i)P(/lM(i)))-e] 

< 2 ni([log(l+^M(i)^CiMW))-log(l+fti3(j)P(^M(i)))-e] + + ^;) ^6) 




Hence 



= JjE{||£-||} < 2l ?/ 1 ([ 1 °s( 1 +^« p ^«))- 1 °s( 1 +^« p ^«))" e ] +^) 



(27) 



i=i 
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Thus 



Pr(£ 2 ) < E < Pr ( x " e B H) 

< E{||£||2- rii?s } (28) 



< 2 



—nR s 



E «i ([log(l+/i M (i)P(/iM (i)))-log(l+A E (i)P(/iM(i)))"^] + + ^-) 



-n E Ulog(l+fe M (i)P(ftM«))-log(l+/ii5(i)P(feMW))-e] + + ^ 

< 2 ^ 1=1 



Rs-± E i {[^g(l+hM(i)P(h M (i)))-\og(l+h E (i)P(h M (i)))] + + ^)- 



where (a) follows from the uniform distribution of the codewords in B(w). Now as n\ — > oo and 
m — > oo, we get 

Pr(£ 2 ) < 2 _n ( c ' s ~ <5 ~ c ' s+ce ) = 2 _n ( ce ~ <5 * ) 

where c = Pr(/iM > h E ). Thus, by choosing e > (5/c), the error probability Pr(£ 2 ) — » as n — > oo. 
Now using Fano's inequality, we get 

#pT ni (l),--- ,X ni (m)\W,Z ni (l),--- ,Z ni (m),h^,h E ) < n5 n ^0 as n -> oo. 

Combining this with (24), we get the desired result. 

For the converse part, consider any sequence of (2 nRs ,n) codes with perfect secrecy rate R s and 
equivocation rate R e , such that R e > R s — e, with average power less than or equal to P and error 
probability P™ — > as n — > oo. We follow the same steps used in the proof of the converse in 
Theorem 1 with the only difference that now the transmission power P n (.) only depends on hu- 
From (22), we get 



nR e < ^ / / H x 'i Y \ z > ^m, h E )l{h M (i)=h M ,h E (i)=h E }dh M dh E + n5 n 
= J J I(X;Y\Z,h M ,h E )N(h M ,h E )dh M dh E + n5 n 

< J J N(h M , h E ) [log(l + h M P n (h M )) - log(l + h E P n (h M ))} + dh M dh E + n5 n . 

This follows from the fact that given Km and h E , the fading channel reduces to an AWGN channel 
with channel gains (fiM,h E ) and average transmission power P"(/i.m), for which Gaussian inputs 
are known to be optimal [5,6]. 

Similar to the proof of Theorem 1, we take the limit over the convergent subsequence and use 
the ergodicity of the channel to obtain 

R e < J J [log(l + h M P(h M )) - log(l + h E P{h M ))] + f(h M )f(h E )dh M dh E + 5 n , (29) 

where K{P(h M )} < P. The claim is thus proved. 
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